The Research of Network Intrusion Detection System Based on Algorithm of Data Mining
Yaoxue Yue · Computers & Security · 2009
The article reviews intrusion detection and data mining techniques, analyses the existing problems of the Snort network intrusion detection system, especially researches the association rule algorithm Apriori and clustering rule algorithm K-means; normal behavior patterns mining module, anomaly detection engine module and new rules generating module are added to the Snort NIDS, finally, designs an intrusion detection system model based on data mining technique. The new system can not only effectively detect new invasion, but also promote detective speed.